popup
Summary | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

build.exe

Generic Malware Malicious Library Admin Tool (Sysinternals etc ...) UPX Malicious Packer ftp PE64 PE File OS Processor Check
  1. Resubmit sample
Category Machine Started Completed
FILE s1_win7_x6401 Oct. 22, 2024, 2:47 p.m. Oct. 22, 2024, 2:49 p.m.
Size 41.1MB
Type PE32+ executable (console) x86-64, for MS Windows
MD5 0f0d9c2f1a7d16b87a8b6be05c9d12c3
SHA256 6bd8253c684ad2e56599f8898606a39240e3ebeab66ac35bf5e7f8191b8719b4
CRC32 7F3D8B36
ssdeep 393216:qEr+7CAtJyEsYLrH95y/1uzVyQcNnxu+ds+o0ECKHOQKtuK+Vf6qrdWY6wdla9Fo:qdv86wQ0xYKV8HFrsPFlXHo
PDB Path C:\Users\runneradmin\AppData\Local\Temp\pkg.6fc73e3c4138f88e1fdbc79e\node\out\Release\node.pdb
Yara
  • Malicious_Library_Zero - Malicious_Library
  • Admin_Tool_IN_Zero - Admin Tool Sysinternals
  • PE_Header_Zero - PE File Signature
  • ftp_command - ftp command
  • Malicious_Packer_Zero - Malicious Packer
  • IsPE64 - (no description)
  • Generic_Malware_Zero - Generic Malware
  • UPX_Zero - UPX packed file
  • OS_Processor_Check_Zero - OS Processor Check

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

pdb_path C:\Users\runneradmin\AppData\Local\Temp\pkg.6fc73e3c4138f88e1fdbc79e\node\out\Release\node.pdb
section _RDATA
section {u'size_of_data': u'0x000e5e00', u'virtual_address': u'0x02a14000', u'entropy': 6.896473867625438, u'name': u'.pdata', u'virtual_size': u'0x000e5c80'} entropy 6.89647386763 description A section with a high entropy has been found
Lionic Trojan.Win32.Stealer.12!c
Cynet Malicious (score: 99)
CTX exe.trojan.stealer
Skyhigh Artemis
Sangfor Infostealer.Win32.Agent.V28f
CrowdStrike win/malicious_confidence_60% (D)
K7GW Riskware ( 00584baa1 )
Arcabit Trojan.Giant.Mikey.45
VirIT Trojan.Win64.Genus.HGS
Symantec ML.Attribute.HighConfidence
ESET-NOD32 JS/Agent.SCY
Paloalto generic.ml
Kaspersky Trojan-PSW.Win32.Stealer.cjis
BitDefender Gen:Variant.Giant.Mikey.45
MicroWorld-eScan Gen:Variant.Giant.Mikey.45
Rising Stealer.Agent!8.C2 (LESS:bWQ1Ovfdsa3m25N+)
Emsisoft Gen:Variant.Giant.Mikey.45 (B)
F-Secure Malware.JS/Agent.naeal
McAfeeD ti!6BD8253C684A
Sophos Mal/Generic-S
FireEye Gen:Variant.Giant.Mikey.45
Jiangmin TrojanDropper.Dapato.aekq
Webroot W32.Malware.Gen
Avira JS/Agent.naeal
Gridinsoft Trojan.Win64.Agent.sa
Microsoft Trojan:Win32/Wacatac.B!ml
GData Gen:Variant.Giant.Mikey.45
AhnLab-V3 Malware/Win.Generic.C5684982
Ikarus Win32.Outbreak
Fortinet JS/Agent.SCY!tr
Panda Trj/Chgt.AD
alibabacloud Trojan[stealer]:Javascript/Stealer.ciRt